NEAS[.]55d89fd7c08b80177f7b41962e8e8ae0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.55d89fd7c08b80177f7b41962e8e8ae0.exe
Size

5KB
MD5

55d89fd7c08b80177f7b41962e8e8ae0
SHA1

264e92573ff03a283fa79f1b8004811b065406d9
SHA256

239d46a6a28846b1798b374216a6cbc71a87621360d6d7aee1d8384634c98586
SHA512

cfd5deb22bc6c62a3d306704636566922d88778f96ea48a11ff35cd5bca76ba2975a6eff84662d08ebc7d9effdb7e36d91a677f637c354f3c47ba54a27ac3158
SSDEEP

96:CRXtH4XRo0iSOwZ9JLF3TryKI57KI5uor:+h4XJiSOw3JLFGhQor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.55d89fd7c08b80177f7b41962e8e8ae0.exe

Files

NEAS.55d89fd7c08b80177f7b41962e8e8ae0.exe
.exe windows:4 windows x64

24a067cc66f073c0475b8b4a3447e1ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilVarBindFree
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ